Drupal 安全漏洞

Drupal is an open source content management system developed in the PHP language by the Drupal community. A security vulnerability exists in Drupal that stems from the existence of a problem...

Drupal 安全漏洞

Drupal is an open source content management system developed in the PHP language by the Drupal community. A security vulnerability exists in Drupal that stems from the existence of a problem...

Security Bulletin: IBM Security QRadar Analyst Workflow for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. The update addresses these issues. Vulnerability Details CVEID:CVE-2024-43796 DESCRIPTION: expressjs express is vulnerable to cross-site scripting, caused by...

CVE-2025-0282

creationtimestamp| type| source ---|---|--- 2025-01-08 17:04:23+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113793817841894943 2025-01-08 17:49:21+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113793994593261539 2025-01-08 17:54:03+00:00| seen|...

Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.16.5 Bug Fix Update

Updated images that fix several bugs are now available for Red Hat OpenShift Data Foundation 4.16.5 on Red Hat Enterprise Linux 9 from Red Hat Container Registry. Red Hat OpenShift Data Foundation is software-defined storage integrated with and optimized for the Red Hat OpenShift Data Foundation...

CVE-2024-12851

creationtimestamp| type| source ---|---|--- 2025-01-08 06:43:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113791376037522876 2025-01-08 06:47:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113791390802796847 2025-01-08 07:15:52+00:00| seen|...

firefox-esr-128.6.0-1.1 on GA media (moderate)

firefox-esr-128.6.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:14619-1 Rating: moderate Cross-References: CVE-2025-0237 CVE-2025-0238 CVE-2025-0239 CVE-2025-0240 CVE-2025-0241 CVE-2025-0242 CVE-2025-0243 Affected Products: openSUSE Tumbleweed An update that solves 7 vulnerabilities can now...

PT-2025-3191 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue is related to a template misconfiguration that causes security vulnerabilities. Recommendations: At the moment, there is no information about a newer version that contains a f...

CVE-2024-55218

creationtimestamp| type| source ---|---|--- 2025-01-07 19:57:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113788836453836260 2025-01-07 20:16:03+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf6hozzsjx2e 2025-01-07 20:39:25+00:00|...

CVE-2024-55412

creationtimestamp| type| source ---|---|--- 2025-01-07 17:30:11+00:00| seen| https://infosec.exchange/users/cve/statuses/113788257000935649 2025-01-07 17:39:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/481 2025-01-07 18:16:07+00:00| seen|...

CISA Releases Two Industrial Control Systems Advisories

CISA released two Industrial Control Systems ICS advisories on January 7, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-007-01 ABB ASPECT-Enterprise, NEXUS, and MATRIX Series Products ICSA-25-007-02 Nedap...

CVE-2025-22364

creationtimestamp| type| source ---|---|--- 2025-01-07 11:18:45+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5jobu4tc2o 2025-01-07 11:18:45+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5jobu4tc2o 2025-01-07 11:48:29+00:00| seen|...

CVE-2025-22316

creationtimestamp| type| source ---|---|--- 2025-01-07 11:17:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5jmgx33b2k 2025-01-07 11:17:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5jmgx33b2k 2025-01-07 14:10:23+00:00| seen|...

CVE-2024-12126

creationtimestamp| type| source ---|---|--- 2025-01-07 05:16:15+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vg2r2hk2k 2025-01-07 16:40:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/461...

CVE-2024-12419

creationtimestamp| type| source ---|---|--- 2025-01-07 03:36:58+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/290 2025-01-07 03:58:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113785064242184668 2025-01-07 04:15:44+00:00| seen|...

Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel vulnerabilities (USN-7167-2)

The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7167-2 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

Security Vulnerabilities fixed in Firefox 134 — Mozilla

In resizeToAtLeast of SkRegion.cpp, there was a possible out of bounds write due to an integer overflow When redirecting to an invalid protocol scheme, an attacker could spoof the address bar. Note: This issue only affected Android operating systems. Other operating systems are unaffected. Under...

Security Vulnerabilities fixed in Thunderbird 134 — Mozilla

The Matrix specification demands homeservers to perform validation of the server-name and media-id components of MXC URIs with the intent to prevent path traversal. However, it is not mentioned that a similar check must also be performed on the client to prevent client-side path traversal...

Security Vulnerabilities fixed in Thunderbird ESR 128.6 — Mozilla

The WebChannel API, which is used to transport various information across processes, did not check the sending principal but rather accepted the principal being sent. This could have led to privilege escalation attacks. Assuming a controlled failed memory allocation, an attacker could have caused...

Pixel Update Bulletin—January 2025Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel Update Bulletin contains details of security vulnerabilities and functional improvements affecting supported Pixel devices Google devices. For Google devices, security patch levels of 2025-01-05 or later address all issues in this bulletin and all issues in the January 2025 Android...